====== Encryption in Dokuwiki ======


I'm now using the ''encrypted passwords plugin'' to encrypt sensitive information on dokuwiki pages. This plugin has the advantage that the encryption used can be decrypted outside of Dokuwiki (e.g. if I can only get hold of the raw text file from a backup) via ''openssl''.

An example of off-line decryption - I copied the encrypted text from a dokuwiki page and pasted it into the ''echo'' command below. At the ''openssl'' password prompt I entered the password used to encrypt and out popped the clear text ''this is an encryption test''

<code bash>
gm4slv@gm4slv:~$ echo 'U2FsdGVkX1/oih+ShQJ/EcEaeOk4JVl4IU2FI1d35A/jAsfy/2nwGbcLEEgABjQf' | openssl base64 -d |openssl aes-256-cbc -d -pbkdf2
enter aes-256-cbc decryption password:
this is an encryption test
</code>

The plugin is documented here:

[[https://www.dokuwiki.org/plugin:encryptedpasswords]]


(UPDATE --- //John Pumford-Green 30/05/22 16:48// )

I found the ''encrypted passwords'' plugin didn't work on the //sandbox// wiki installation. The only difference I can see is that the //sandbox// uses PHP7.4 rather than PHP7.3 on the //production// webserver.

I've installed the ''dokucrypt2'' plugin [[https://www.dokuwiki.org/plugin:dokucrypt2]] on **both** machines and it **//works//** on **both**. 

I'll have to de-crypt the original encrypted pages and re-encrypt them using the ''dokucrypt2'' plugin if I want to access them on the //sandbox// machine, but that's not too difficult to do, there's not much encrypted information (yet).

(**UPDATE** --- //John Pumford-Green 30/05/22 19:43// )

I solved the issue with the //sandbox// server - it **//needs to be enabled for HTTPS (SSL) for this plugin to work//**. 

I installed a self-signed certificate and set up SSL for the shack's webserver as detailed here: [[public:computers:sandbox_server|]] and the original plugin works. Which is good, because I preferred it to the dokucrypt2 plugin.


Page Updated: ~~LASTMOD~~

{{tag>dokuwiki ssl}}